Lucene search

[email protected]CVE-2016-7217

HistoryNov 10, 2016 - 6:59 a.m.

CVE-2016-7217

2016-11-1006:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-7217

media foundation

memory corruption

vulnerability

microsoft windows

remote code execution

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.533 Medium

EPSS

Percentile

97.6%

JSON

Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka “Media Foundation Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:windows_rt_8.1microsoft windows rt 8.1eq*
microsoft:windows_server_2012microsoft windows server 2012eqr2
microsoft:windows_server_2016microsoft windows server 2016eq*
microsoft:windows_10microsoft windows 10eq1511
microsoft:windows_10microsoft windows 10eq1607
microsoft:windows_8.1microsoft windows 8.1eq*
microsoft:windows_server_2012microsoft windows server 2012eq-
microsoft:windows_10microsoft windows 10eq-

CPE	Name	Operator	Version
microsoft:windows_rt_8.1	microsoft windows rt 8.1	eq	*
microsoft:windows_server_2012	microsoft windows server 2012	eq	r2
microsoft:windows_server_2016	microsoft windows server 2016	eq	*
microsoft:windows_10	microsoft windows 10	eq	1511
microsoft:windows_10	microsoft windows 10	eq	1607
microsoft:windows_8.1	microsoft windows 8.1	eq	*
microsoft:windows_server_2012	microsoft windows server 2012	eq	-
microsoft:windows_10	microsoft windows 10	eq	-